Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b203efd-b46d-3a43-b468-1149cad0a2dd.roa
File:                     5b203efd-b46d-3a43-b468-1149cad0a2dd.roa (raw, json)
Hash identifier:          aQXeuh+mquHjf2ha1Wqit/P8RHL01ZYg+W8k02Fpz2Q=
Subject key identifier:   7D:8E:EF:36:1F:B3:DB:54:F8:E6:04:9F:41:CB:2E:BB:2D:FA:BA:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79AC19A38EFC7B06AD480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b203efd-b46d-3a43-b468-1149cad0a2dd.roa
Signing time:             Thu 16 Apr 2026 14:09:50 +0000
ROA not before:           Thu 16 Apr 2026 14:09:50 +0000
ROA not after:            Wed 15 Jul 2026 14:09:50 +0000
asID:                     36630
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9a:c1:9a:38:ef:c7:b0:6a:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:50 2026 GMT
            Not After : Jul 15 14:09:50 2026 GMT
        Subject: CN=4b39be86-60dc-453e-8fb0-ea08d15c4808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:90:1b:4c:12:1b:37:b8:a1:ad:85:61:40:98:
                    d2:cf:8b:e3:88:3e:75:a5:91:6c:ee:ab:7f:8f:1f:
                    af:66:02:06:eb:b6:cd:7c:b4:58:2e:f2:11:34:73:
                    81:de:f5:fe:cd:fa:f3:c2:b6:4a:df:93:62:0b:2a:
                    2b:85:66:61:37:6c:8f:cf:f6:f1:3e:a3:e0:fc:9e:
                    e3:38:b9:7d:6a:a6:d1:7f:17:9a:cd:dd:66:a3:8f:
                    70:b6:cc:0c:d6:01:19:8e:48:ff:71:d5:d6:1f:03:
                    23:8a:9a:9f:5f:4b:18:d5:a4:7a:80:31:4d:e2:b2:
                    44:65:c6:a4:f0:d9:92:f5:dc:a0:e1:fd:5f:01:d0:
                    17:11:6e:3a:3f:be:db:4b:7d:41:d1:ed:89:13:22:
                    85:5a:54:d8:85:c9:bd:54:5f:e2:60:41:af:d0:04:
                    a2:48:f9:f1:cb:47:24:a1:08:51:4e:65:66:15:a9:
                    c5:7d:5d:39:04:08:9b:da:36:8d:ee:5d:70:e4:37:
                    11:23:b5:bf:c1:57:80:73:81:9f:4b:d7:5e:f8:c0:
                    5a:04:7b:3b:0f:19:e3:5b:17:ec:cc:b2:d9:02:7e:
                    6b:cf:78:83:08:51:2f:a7:5a:fd:23:b5:49:59:e0:
                    63:5c:fb:e6:4a:13:fb:ff:40:a1:e3:a9:a1:e8:1c:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8E:EF:36:1F:B3:DB:54:F8:E6:04:9F:41:CB:2E:BB:2D:FA:BA:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b203efd-b46d-3a43-b468-1149cad0a2dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:ec:85:e5:7e:72:42:df:84:81:85:10:a7:ac:a6:3c:75:
         32:99:ec:d6:e7:98:e6:c3:22:a6:85:4b:a4:f8:35:68:59:20:
         a9:c4:11:46:15:23:e9:31:fd:30:a2:7d:d2:28:88:96:5e:19:
         9f:e9:1d:97:28:1e:a8:66:7c:dd:79:5f:a0:54:dc:42:13:97:
         03:bd:aa:1a:f0:fe:ab:5e:7d:be:f7:dd:60:ff:34:87:2a:9e:
         a9:87:ae:5b:f9:b4:74:4f:69:13:d5:3e:fa:4a:15:2e:d8:f2:
         7b:33:97:07:aa:01:b1:03:42:2c:9c:c3:20:36:6b:7b:7a:7a:
         5d:fc:15:e5:03:aa:8c:b6:bd:07:21:ae:c2:08:e5:ec:5e:d4:
         8a:e3:02:a4:26:99:33:db:3d:c7:95:2d:0d:a5:08:6d:93:62:
         94:92:5f:d6:b3:65:d3:1d:7e:2a:36:fa:bc:42:8e:05:79:f8:
         70:19:06:21:a3:b2:5a:06:26:af:a6:a5:8d:e2:2f:8c:71:cd:
         31:d1:bd:b9:ec:60:9a:fe:26:5d:1e:a2:65:0b:5b:8f:c5:5c:
         6a:e8:51:36:e0:ba:8f:23:00:22:10:dd:8a:14:bc:5d:6b:67:
         f6:b2:29:14:cf:54:46:c6:b1:f8:9f:fc:32:48:d9:93:75:88:
         4a:fb:dc:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Gt5rBmjjvx7Bq1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjE0MDk1MFoXDTI2MDcxNTE0MDk1MFowLzEtMCsGA1UEAxMk
NGIzOWJlODYtNjBkYy00NTNlLThmYjAtZWEwOGQxNWM0ODA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJAbTBIbN7ihrYVhQJjSz4vjiD51pZFs7qt/
jx+vZgIG67bNfLRYLvIRNHOB3vX+zfrzwrZK35NiCyorhWZhN2yPz/bxPqPg/J7j
OLl9aqbRfxeazd1mo49wtswM1gEZjkj/cdXWHwMjipqfX0sY1aR6gDFN4rJEZcak
8NmS9dyg4f1fAdAXEW46P77bS31B0e2JEyKFWlTYhcm9VF/iYEGv0ASiSPnxy0ck
oQhRTmVmFanFfV05BAib2jaN7l1w5DcRI7W/wVeAc4GfS9de+MBaBHs7DxnjWxfs
zLLZAn5rz3iDCFEvp1r9I7VJWeBjXPvmShP7/0Ch46mh6BziGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2O7zYfs9tU+OYEn0HLLrst+rq8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWIyMDNlZmQtYjQ2ZC0z
YTQzLWI0NjgtMTE0OWNhZDBhMmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALIc7IXlfnJC34SBhRCnrKY8dTKZ7NbnmObDIqaFS6T4NWhZIKnEEUYV
I+kx/TCifdIoiJZeGZ/pHZcoHqhmfN15X6BU3EITlwO9qhrw/qtefb733WD/NIcq
nqmHrlv5tHRPaRPVPvpKFS7Y8nszlweqAbEDQiycwyA2a3t6el38FeUDqoy2vQch
rsII5exe1IrjAqQmmTPbPceVLQ2lCG2TYpSSX9azZdMdfio2+rxCjgV5+HAZBiGj
sloGJq+mpY3iL4xxzTHRvbnsYJr+Jl0eomULW4/FXGroUTbguo8jACIQ3YoUvF1r
Z/ayKRTPVEbGsfif/DJI2ZN1iEr73O8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:55 2026 by rpki-client